Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
File: mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json)
Hash identifier: GTETfcIh01igOPKcyIfwpBgS41gw7Ef5w0xrbY6Rm2I=
Subject key identifier: 26:1D:E3:D3:73:E4:FC:E5:41:68:A5:F2:8E:D4:6F:2F:EB:65:82:5A
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial: 019D28846C7CB014874CFA9BCA40D29DBBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
Manifest number: 0CF1
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: MB_fxyRovNDE1Ao_sqXvMCyvsHs.roa (hash: 1RlOpJPGUwPySnoc4bJ92X2BUeJ9PgaVyLOke+PwpWY=)
2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: g54r0WTOdDv/sj43urR26A7TQpC0Nja0wnaHOCHzJdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6c:7c:b0:14:87:4c:fa:9b:ca:40:d2:9d:bb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=261de3d373e4fce54168a5f28ed46f2feb65825a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:97:60:7c:31:22:b1:06:c6:a9:e5:62:c1:
64:80:74:b6:c5:12:2f:0f:26:8a:67:ac:f5:1c:a0:
0a:fc:ec:88:62:20:63:bb:d1:2e:0c:42:2e:3c:30:
32:a3:82:87:e6:8f:06:77:7c:ca:7f:77:67:48:1c:
85:5a:0f:df:76:6a:91:77:7e:89:3a:4b:eb:6b:47:
17:99:c1:41:18:32:44:be:d6:d2:dd:34:18:c9:e3:
37:41:ae:e5:e9:2e:53:c6:11:13:ab:2a:a8:7a:b8:
09:9d:d7:03:e5:5b:df:e2:25:d2:4a:7d:1f:90:fd:
af:3d:ea:d8:be:12:8c:40:ab:84:8a:07:19:4f:fc:
c6:f8:f1:79:a7:d5:40:d7:04:ef:60:3f:99:77:09:
34:01:5c:2d:2e:3a:01:54:e2:3c:7e:c1:c6:4e:98:
35:f9:24:ab:4f:18:ce:db:9e:85:c7:e8:95:3a:23:
fb:7a:94:17:2a:16:3f:98:0c:e0:08:cb:82:c8:93:
92:17:66:d8:0f:a4:fd:04:23:7a:23:e8:4e:7e:d6:
bf:41:9a:57:58:14:42:92:78:5f:50:1c:24:ad:e6:
1e:37:a8:06:f5:93:65:58:60:36:c6:7e:4d:c7:69:
1e:08:eb:20:cd:04:20:25:9b:b5:74:55:24:eb:1e:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1D:E3:D3:73:E4:FC:E5:41:68:A5:F2:8E:D4:6F:2F:EB:65:82:5A
X509v3 Authority Key Identifier:
keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:68:51:cf:af:88:cc:9b:d8:ed:04:a5:f2:22:a1:f1:ef:6c:
6f:74:0b:17:81:92:1b:0b:29:3b:8d:b4:41:cf:fc:43:1b:20:
33:fd:83:d1:2c:93:73:e9:77:ab:87:7e:a3:54:23:6c:87:93:
2c:b2:0e:d4:66:b5:a8:1e:ea:33:8e:43:eb:b0:a4:a3:c0:80:
6a:b4:4a:14:83:8f:bb:0d:53:b3:42:a4:ad:46:e3:94:11:52:
b6:81:9e:54:16:73:41:81:13:91:b9:74:38:17:69:a4:f0:35:
e0:d0:98:22:60:58:ad:a7:e9:e2:4f:90:56:ca:dc:64:20:33:
b8:45:4c:cf:3e:51:e1:3e:fe:42:63:0d:cf:ac:d5:40:d5:00:
c4:2e:2e:d1:c7:8e:dd:fc:42:f1:c3:c7:a6:36:88:83:36:db:
9e:92:91:dc:9b:7c:5e:5a:d9:96:32:db:d0:7b:a2:fc:3b:50:
97:be:96:c1:9b:52:98:75:e8:89:12:bf:3b:e8:e3:f7:5d:56:
cd:6a:07:74:21:28:0a:fd:e0:f0:3e:07:3d:aa:ed:2e:6c:74:
cf:10:0f:53:05:a1:18:fe:fa:53:be:be:ca:d7:3b:1b:fb:f6:
6a:f0:cd:98:d7:f4:42:2e:b2:02:66:95:39:9f:37:3c:ad:fc:
da:b3:10:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:39 2026 by rpki-client